Skip to content
CVE PROGRAM SOURCE RECORD8.3 High

CVE-2026-24808

A possible integer overflow vulnerability in RawTherapee/RawTherapee

Description

Integer Overflow or Wraparound vulnerability in RawTherapee (rtengine modules). This vulnerability is associated with program files dcraw.Cc. This issue affects RawTherapee: through 5.11.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

RawTherapee RawTherapee

Default version status: affected

  • 0 to ≤ 5.11affected

References